CVE-2017-15985

CVE-2017-15985 is a confirmed SQL injection in the Basic B2B Script, exploitable via the request parameter in product_view1.php (pid or id). The issue originates from unsafely handling these parameters, enabling attackers to inject SQL commands. Public references (Exploit-DB PoC and related CVE r...